The innovations of CPX 2024: a comprehensive overview

At CPX 2024, Check Point presented a number of exciting innovations and products that will have a significant impact on the world of cyber security. In this article, we would like to inform you about the most important highlights and developments that were presented at the trade fair.

Product innovations and improvements

  • AI and partner program: The importance of AI (artificial intelligence) in the cloud management component was emphasized, including an AI copilot that supports administrators. The R82, which is planned for June 2024, will also include AI functionalities.
  • New appliance models: 10 new appliance models have been announced, which are equipped with at least double the performance and AI coprocessors.
  • Quantum Force Appliances: Detailed information on the new Quantum Force Appliances, which offer outstanding performance and security, is now available.
  • Enhancements in the area of Threat Cloud and Professional Services: The Threat Cloud was highlighted, in particular the ability to forward threats to all other Check Point modules within just 2 seconds. Infinity Global Services and an associated managed service platform were also presented.

Innovations in cloud and network security

  • CloudGuard: CloudGuard enhancements include an AI-powered web application firewall that now also works on-premise and an impressive CNAPPP (Cloud Native Application Protection Platform) roadmap for 2024.
  • SASE and Harmony Updates: Check Point leads in SASE and offers end-to-end solutions with Harmony, including improved monitoring and a new Policy Advisor.
  • R82 Features: With the R82 version come numerous new features, including an ElasticXL Cluster for Active Active Clustering, an improved VSX (VSNext), and enhanced management capabilities for up to 500 gateways.

Extensions and innovations with Check Point R82

The launch of R82 is imminent and brings with it a number of groundbreaking innovations that should be of interest to companies of all sizes. Of particular note is the new ElasticXL Cluster, which works in a similar way to the proven Maestro architecture, but without the need for an orchestrator. This cluster variant enables active-active clustering, which can utilize almost the full performance of the gateways involved. Up to three gateways can be operated within an ElasticXL Security Group, which enables scaling without compromising clarity - the admin interface remains consistent with the look and feel of Maestro with Orchestrator.

Another significant update is the introduction of VSNext with the R82. This new VSX model extends the management capabilities from the SmartConsole to GaiaAPI, WebGui and Clish. This improves the upgrade capability, as upgrades can now be carried out in a similar way to a regular gateway. It is also possible to manage virtual instances via different management servers.

R82 also offers a wealth of other functions:

  • Management Scale: It is now possible to manage up to 500 gateways with one management server (classic or Smart-1).
  • MultiDomain Enhancements: Up to 50% faster upgrades and the ability to clone domains have been added.
  • Hyperflow MultiCore Processing: Support for CIFS and UDP traffic is now provided.
  • Site-to-Site VPN Resilience: There is automatic adaptation to changes in public cloud environments such as AWS, GCP and Azure to ensure connection stability.
  • Centralized identity provider management: All identity providers can now be managed centrally via the Infinity platform.
  • Non-disruptive TLS inspection: The new, non-disruptive TLS inspection is designed to eliminate connection problems, supported by an automatically updated database for "trusted sites and pinned applications". In addition, the "Bypass under Load" function helps to prevent performance problems.
  • Policy Advisor: With the help of the AI Copilot, a Policy Advisor is introduced that helps to break down rules that are too broad into more effective, individual rules.
  • Maestro Upgrades: R82 will simplify Maestro Orchestrator setups with a first time wizard, enable API configuration for gateways, ports, security groups and sites, and provide new insights into the data generated by the new "insights" command. The upgrade procedure for Maestro environments is also simplified.

Summary and outlook

CPX 2024 was all about innovation and progress. With the innovations presented, Check Point underlines its leading role in the field of cyber security. The new products and features offer companies of all sizes advanced tools to effectively protect themselves against growing cyber threats.

Are you already familiar with our Check Point training courses and workshops? Find out more here

As your partner in the field of cyber security, we look forward to working with you to use these innovations to further strengthen your security strategy. If you have any questions about the new products and services or would like individual advice, please do not hesitate to contact us at any time.